jerryshao commented on PR #12757: URL: https://github.com/apache/gravitino/pull/12757#issuecomment-5813569045
Here are several open questions: 1. How to deal with privileges defined both with RBAC and TBAC? Which takes precedence, and how do we handle conflicts? 2. Tags have inheritance, and our RBAC system has inheritance too (SELECT TABLE on the catalog will automatically inherit the privileges). Will these two inheritance models conflict? Will this increase the complexity of calculating the privileges when authorizing? 3. Will this TBAC bring in any privilege leakage issue or any unexpected corner case? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
